Kapital Bistro ("we", "us") runs Kapital Bistro Ondo, Kapital Lagos and BlingX Lagos, this website and the Kapital Club rewards programme. This policy explains what we collect, why, and the choices you have. We handle personal data under the Nigeria Data Protection Act 2023.
What we collect
- Account details: your email address, and your name and phone number if you add them. If you sign in with Google, we receive your name and email from Google.
- Visits and rewards: the spends you lodge (center, visit date, amount, receipt number), the receipt photos you upload, your points balance and history, claims and merch you reserve, and reservations and enquiries you send.
- Messages you choose: whether you want updates by email, WhatsApp or browser notifications.
- Technical data: a sign-in cookie that keeps you signed in, and the device and browser details sent with each visit, used to keep accounts secure.
How we use it
- To run your account and the Kapital Club: crediting points, confirming claims and handing over merch.
- To read your receipts. When you upload a receipt, an automated service reads the date, time, amount, receipt number and who was paid, to fill in the form for you and to spot receipts that have been used before. Our staff make every decision on your points; the automated reading only helps them check.
- To send you what you ask for: sign-in codes, updates on your requests, and offers if you opt in.
- To prevent fraud and misuse, and to meet our legal and tax obligations.
Who we share it with
We do not sell your data. We share it only with providers who help us run the service, under contracts that protect it:
- Amazon Web Services, for hosting, file storage and email.
- Google, for Google sign-in and for reading receipt photos.
- Our WhatsApp messaging provider, if you choose WhatsApp updates.
We may also share data when the law requires it, or to protect our guests, staff or business.
How long we keep it
We keep your account and rewards history while your account is open, and for as long as the law requires afterwards for tax and accounting records. You can ask us to delete your account at any time.
Your rights
You can ask to see, correct or delete your data, to object to how we use it, or to receive a copy of it. You can change your message choices in your account at any time. You may also complain to the Nigeria Data Protection Commission.
Keeping it safe
We use encrypted connections, private storage for receipts, and staff access limited to the people who need it.
Children
Our services are for adults. We do not knowingly collect data from anyone under 18.
Changes and contact
We will update this page when our practices change and show the date it last changed. For any privacy question or request, email info@kapitalbistro.com.
Last updated 9 November 2026